Update ruby, puma, bundler-audit, and a few other gems with CVEs (ced…

…arcode#137)

Gemfile

@@ -8,9 +8,9 @@ ruby File.read(".ruby-version").strip
 gem 'rails', "~> 6.1.7"
 gem "webauthn", "~> 3.0.0"
 
-gem 'bootsnap', '~> 1.10.0', require: false
+gem 'bootsnap', '~> 1.17', require: false
 gem 'pg', '~> 1.1'
-gem 'puma', '4.3.6'
+gem 'puma', '~> 6.3', '>= 6.3.1'
 gem "rollbar", "~> 2.16"
 gem 'sassc-rails', '~> 2.0'
 gem 'webpacker', '~> 5.0'
@@ -27,13 +27,13 @@ group :development, :test do
 end
 
 group :development do
- gem "brakeman", "~> 4.8"
- gem "bundler-audit", "~> 0.7.0"
+ gem "brakeman", '~> 6.0', '>= 6.0.1'
+ gem "bundler-audit", '~> 0.9.1'
  gem 'listen', '~> 3.8'
  gem "rack-mini-profiler", "~> 2.0"
  gem 'spring', '~> 2.1'
  gem 'spring-watcher-listen', '~> 2.0'
- gem 'web-console', '~> 4.0'
+ gem 'web-console', '~> 4.2', '>= 4.2.1'
 end
 
 group :test do

Gemfile.lock

@@ -60,20 +60,20 @@ GEM
  minitest (>= 5.1)
  tzinfo (~> 2.0)
  zeitwerk (~> 2.3)
- addressable (2.7.0)
- public_suffix (>= 2.0.2, < 5.0)
+ addressable (2.8.5)
+ public_suffix (>= 2.0.2, < 6.0)
  android_key_attestation (0.3.0)
  ast (2.4.1)
  awrence (1.2.1)
  bindata (2.4.15)
  bindex (0.8.1)
- bootsnap (1.10.3)
+ bootsnap (1.17.0)
  msgpack (~> 1.2)
- brakeman (4.8.2)
+ brakeman (6.0.1)
  builder (3.2.4)
- bundler-audit (0.7.0.1)
+ bundler-audit (0.9.1)
  bundler (>= 1.2.0, < 3)
- thor (>= 0.18, < 2)
+ thor (~> 1.0)
  byebug (11.1.3)
  capybara (3.39.2)
  addressable
@@ -85,30 +85,30 @@ GEM
  regexp_parser (>= 1.5, < 3.0)
  xpath (~> 3.2)
  cbor (0.5.9.6)
- concurrent-ruby (1.1.6)
+ concurrent-ruby (1.2.2)
  cose (1.3.0)
  cbor (~> 0.5.9)
  openssl-signature_algorithm (~> 1.0)
  crass (1.0.6)
- date (3.3.3)
+ date (3.3.4)
  dotenv (2.7.6)
  dotenv-rails (2.7.6)
  dotenv (= 2.7.6)
  railties (>= 3.2)
- erubi (1.9.0)
+ erubi (1.12.0)
  ffi (1.16.3)
- globalid (1.1.0)
- activesupport (>= 5.0)
- i18n (1.8.3)
+ globalid (1.2.1)
+ activesupport (>= 6.1)
+ i18n (1.14.1)
  concurrent-ruby (~> 1.0)
  jaro_winkler (1.5.4)
  jwt (2.7.1)
  listen (3.8.0)
  rb-fsevent (~> 0.10, >= 0.10.3)
  rb-inotify (~> 0.9, >= 0.9.10)
- loofah (2.6.0)
+ loofah (2.22.0)
  crass (~> 1.0.2)
- nokogiri (>= 1.5.9)
+ nokogiri (>= 1.12.0)
  mail (2.8.1)
  mini_mime (>= 0.1.1)
  net-imap
@@ -118,43 +118,43 @@ GEM
  matrix (0.4.2)
  method_source (1.0.0)
  mini_mime (1.1.5)
- mini_portile2 (2.5.3)
+ mini_portile2 (2.8.5)
  minitest (5.20.0)
  minitest-stub_any_instance (1.0.2)
  msgpack (1.7.2)
- net-imap (0.3.7)
+ net-imap (0.4.7)
  date
  net-protocol
  net-pop (0.1.2)
  net-protocol
- net-protocol (0.2.1)
+ net-protocol (0.2.2)
  timeout
- net-smtp (0.3.3)
+ net-smtp (0.4.0)
  net-protocol
- nio4r (2.5.2)
- nokogiri (1.11.7)
- mini_portile2 (~> 2.5.0)
+ nio4r (2.6.1)
+ nokogiri (1.15.5)
+ mini_portile2 (~> 2.8.2)
  racc (~> 1.4)
- openssl (3.1.0)
+ openssl (3.2.0)
  openssl-signature_algorithm (1.3.0)
  openssl (> 2.0)
  parallel (1.19.2)
  parser (2.7.1.4)
  ast (~> 2.4.1)
  pg (1.5.4)
  public_suffix (4.0.5)
- puma (4.3.6)
+ puma (6.4.0)
  nio4r (~> 2.0)
  racc (1.7.3)
- rack (2.2.3)
+ rack (2.2.8)
  rack-host-redirect (1.3.0)
  rack
  rack-mini-profiler (2.0.2)
  rack (>= 1.2.0)
  rack-proxy (0.6.5)
  rack
- rack-test (1.1.0)
- rack (>= 1.0, < 3)
+ rack-test (2.1.0)
+ rack (>= 1.3)
  rails (6.1.7.6)
  actioncable (= 6.1.7.6)
  actionmailbox (= 6.1.7.6)
@@ -170,25 +170,27 @@ GEM
  bundler (>= 1.15.0)
  railties (= 6.1.7.6)
  sprockets-rails (>= 2.0.0)
- rails-dom-testing (2.0.3)
- activesupport (>= 4.2.0)
+ rails-dom-testing (2.2.0)
+ activesupport (>= 5.0.0)
+ minitest
  nokogiri (>= 1.6)
- rails-html-sanitizer (1.3.0)
- loofah (~> 2.3)
+ rails-html-sanitizer (1.6.0)
+ loofah (~> 2.21)
+ nokogiri (~> 1.14)
  railties (6.1.7.6)
  actionpack (= 6.1.7.6)
  activesupport (= 6.1.7.6)
  method_source
  rake (>= 12.2)
  thor (~> 1.0)
- rainbow (3.0.0)
- rake (13.0.1)
- rb-fsevent (0.11.2)
+ rainbow (3.1.1)
+ rake (13.1.0)
+ rb-fsevent (0.10.4)
  rb-inotify (0.10.1)
  ffi (~> 1.0)
- regexp_parser (1.7.1)
+ regexp_parser (2.8.2)
  rexml (3.2.6)
- rollbar (2.26.0)
+ rollbar (2.27.1)
  rubocop (0.80.1)
  jaro_winkler (~> 1.5.1)
  parallel (~> 1.10)
@@ -213,33 +215,33 @@ GEM
  sprockets (> 3.0)
  sprockets-rails
  tilt
- selenium-webdriver (4.9.0)
+ selenium-webdriver (4.15.0)
  rexml (~> 3.2, >= 3.2.5)
  rubyzip (>= 1.2.2, < 3.0)
  websocket (~> 1.0)
  semantic_range (2.3.0)
- spring (2.1.0)
+ spring (2.1.1)
  spring-watcher-listen (2.0.1)
  listen (>= 2.7, < 4.0)
  spring (>= 1.2, < 3.0)
- sprockets (4.0.2)
+ sprockets (4.2.1)
  concurrent-ruby (~> 1.0)
- rack (> 1, < 3)
- sprockets-rails (3.2.2)
- actionpack (>= 4.0)
- activesupport (>= 4.0)
+ rack (>= 2.2.4, < 4)
+ sprockets-rails (3.4.2)
+ actionpack (>= 5.2)
+ activesupport (>= 5.2)
  sprockets (>= 3.0.0)
- thor (1.0.1)
+ thor (1.3.0)
  tilt (2.0.10)
- timeout (0.4.0)
+ timeout (0.4.1)
  tpm-key_attestation (0.12.0)
  bindata (~> 2.4)
  openssl (> 2.0)
  openssl-signature_algorithm (~> 1.0)
  tzinfo (2.0.6)
  concurrent-ruby (~> 1.0)
  unicode-display_width (1.6.1)
- web-console (4.2.0)
+ web-console (4.2.1)
  actionview (>= 6.0.0)
  activemodel (>= 6.0.0)
  bindex (>= 0.4.0)
@@ -264,22 +266,22 @@ GEM
  websocket-extensions (0.1.5)
  xpath (3.2.0)
  nokogiri (~> 1.8)
- zeitwerk (2.3.1)
+ zeitwerk (2.6.12)
 
 PLATFORMS
  ruby
 
 DEPENDENCIES
- bootsnap (~> 1.10.0)
- brakeman (~> 4.8)
- bundler-audit (~> 0.7.0)
+ bootsnap (~> 1.17)
+ brakeman (~> 6.0, >= 6.0.1)
+ bundler-audit (~> 0.9.1)
  byebug (~> 11.0)
  capybara (~> 3.26)
  dotenv-rails (~> 2.7)
  listen (~> 3.8)
  minitest-stub_any_instance (~> 1.0)
  pg (~> 1.1)
- puma (= 4.3.6)
+ puma (~> 6.3, >= 6.3.1)
  rack-host-redirect (~> 1.3)
  rack-mini-profiler (~> 2.0)
  rails (~> 6.1.7)
@@ -290,7 +292,7 @@ DEPENDENCIES
  selenium-webdriver (~> 4.4)
  spring (~> 2.1)
  spring-watcher-listen (~> 2.0)
- web-console (~> 4.0)
+ web-console (~> 4.2, >= 4.2.1)
  webauthn (~> 3.0.0)
  webpacker (~> 5.0)